Reports summarized by policy and policy rules will show incorrect match counts within the Incident Report.

The actual incident snapshot will have correct match counts pertaining to the number of rules violated per policy.

Row and Column counts are adversely affected by compound rules and report summarization.

1. Each matched rule is summed correctly.
2. Total violations are a sum of all rules violated.
3. Total Matches is skewed due to compound rules being summed.

Because the incident and match counts are correct, per incident, no further action is required.

Workaround for statistical reporting for DLP administrators. Remove the secondary summarization from the policy summary settings.